Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.mft
File: CyR-czkeydaipG8ssLAvyZQojxM.mft (raw, json)
Hash identifier: EQrgwIzFBVjxQUMTkc3ni26reCOB+BlmsVGs+ZWLjr8=
Subject key identifier: 02:E9:43:69:E2:D2:7F:A2:3D:DD:CB:62:B0:C2:D4:EE:E7:61:BC:BF
Authority key identifier: 0B:24:7E:73:39:1E:C9:D6:A2:A4:6F:2C:B0:B0:2F:C9:94:28:8F:13
Certificate issuer: /CN=0b247e73391ec9d6a2a46f2cb0b02fc994288f13
Certificate serial: 01A1DE3958A1D53A5711A32B5226218F5A9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CyR-czkeydaipG8ssLAvyZQojxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.mft
Manifest number: 0FAE
Signing time: Sun 15 Nov 2026 08:01:02 +0000
Manifest this update: Sun 15 Nov 2026 08:01:02 +0000
Manifest next update: Mon 16 Nov 2026 08:01:02 +0000
Files and hashes: 1: 3QU72n6t3MWYqTRmtQPsgUZpVD4.roa (hash: SI2+K6a2Rt0xu9fvCiRz8l4pzkh4ttyf9ACSs48nZZ8=)
2: 9zE0ccdB1nEJPm6ds43vYaXbU8A.roa (hash: KLdF/9GXTDXvmP2vKrsOb2S2ppNR+C722vvMttsp8m0=)
3: C7upr3OThd3tXxD0Jp3efP87jfI.roa (hash: lEZFdASUU6/xOhjoa3o2AQ+zoANpIUUDUCbBj5Ku9pA=)
4: CyR-czkeydaipG8ssLAvyZQojxM.crl (hash: tQBMEytvtDmEmZOXqc1+g55ruFUDaVEiHF31Zq8LlFs=)
5: PPSBbdrAtgcgXON-ZEnuVTdydek.roa (hash: 26qcz9smP5qtjov7YMsO3/ZgGWIDpKGNOgayn6qmDak=)
6: WLRoXLz8o5aIoTKu9vysSiArlgU.roa (hash: Z0u4BcBUIP4op3aBxiGkfF2ykvUBdw5T+EbUw3CuBFA=)
7: j5b05RZ-Pc84VbhjXWfOQdXvstg.roa (hash: fBPy1BOnpgVVJsYa962/feL6Jx4Rr6v5dNxNajdLYgw=)
8: wdvXFPkvt-d9b0S5-H5QvNZuELY.roa (hash: pOQkB8CIcydxsKoAZ+FXu6v1HpR5Zz+Qp6TW+J9alA4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CyR-czkeydaipG8ssLAvyZQojxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:39:58:a1:d5:3a:57:11:a3:2b:52:26:21:8f:5a:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b247e73391ec9d6a2a46f2cb0b02fc994288f13
Validity
Not Before: Nov 15 08:01:02 2026 GMT
Not After : Nov 16 08:01:02 2026 GMT
Subject: CN=02e94369e2d27fa23dddcb62b0c2d4eee761bcbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:a3:78:74:b3:16:a4:21:6c:02:bf:e6:b0:14:
65:ed:8c:13:b9:d4:7d:15:7d:c1:1a:8f:40:05:46:
e2:41:6e:d7:9c:df:a9:29:0c:f9:a5:94:ff:60:46:
06:eb:83:b9:ec:5d:0e:80:ec:03:a2:a4:0a:4f:1e:
12:9e:2b:0e:cc:78:23:96:c1:1f:ed:1d:31:21:6c:
48:2e:5c:fb:ab:a0:b8:75:bb:c5:54:ab:4d:3c:a6:
11:75:36:c7:8f:16:38:bd:7f:5f:47:df:64:60:0b:
b6:4a:e8:da:32:d5:de:ed:17:eb:50:55:e3:6c:17:
cf:52:a2:08:1d:0f:70:eb:d4:30:ac:88:a1:58:b0:
a0:23:4a:f4:19:86:5c:05:94:b6:4e:47:e3:af:57:
1d:42:24:66:6d:26:fc:24:aa:f1:00:e3:1e:56:f7:
83:1e:d4:4d:23:03:a0:52:a6:95:ff:1f:29:13:43:
f5:c7:98:b0:99:38:ad:91:b8:63:25:bc:02:04:74:
2c:66:91:d6:64:b4:eb:de:13:1c:e6:75:fb:21:83:
08:ba:8b:1f:5b:95:1e:73:af:97:04:9d:9a:da:4d:
65:08:1c:05:12:a5:ba:08:e5:0b:be:4d:d1:e8:9c:
8f:b6:85:61:80:f7:f7:32:8a:a9:f0:2d:82:60:81:
fd:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:E9:43:69:E2:D2:7F:A2:3D:DD:CB:62:B0:C2:D4:EE:E7:61:BC:BF
X509v3 Authority Key Identifier:
keyid:0B:24:7E:73:39:1E:C9:D6:A2:A4:6F:2C:B0:B0:2F:C9:94:28:8F:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CyR-czkeydaipG8ssLAvyZQojxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:85:01:2d:02:9c:ab:88:87:15:37:8f:7a:a0:dc:c6:ff:58:
8c:7b:0e:c7:cd:a8:76:df:ae:84:90:13:61:04:c5:b1:3f:50:
27:a4:c4:d5:6a:a0:a3:44:98:56:58:68:ef:a9:4f:24:50:17:
8e:7a:17:02:1a:61:39:5c:b5:1a:dc:a8:38:99:c2:b6:58:6f:
92:e0:5d:81:40:dd:d5:31:12:e2:56:0a:00:ae:b4:ac:4c:1a:
5a:1a:91:7b:6e:af:ec:0f:f5:0f:41:53:75:2e:fb:9e:c4:7c:
24:21:13:8d:e2:93:3d:a5:82:35:84:ba:75:06:43:b1:6c:7f:
b8:5e:9f:8d:d3:2b:b0:c3:e1:d9:d1:7e:63:f3:ef:6d:3f:d0:
82:4e:a4:ab:87:d3:e6:b3:54:37:61:ba:63:29:38:92:07:89:
9c:06:47:75:e6:a3:fb:a1:9c:21:e3:ed:2a:5b:d3:07:b1:08:
c7:62:67:05:42:b8:7b:84:8e:11:bc:fe:7e:4d:b1:f4:e3:89:
01:a8:c1:85:1c:27:e6:3c:0c:47:a4:47:d8:e2:da:f6:b1:f3:
15:f4:76:72:d1:4f:be:93:0c:ca:bf:96:fa:e9:29:78:0a:c0:
99:65:c5:65:35:00:76:b8:98:66:2e:10:47:dd:b6:de:07:1b:
77:7b:cb:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:26:50 2026 by rpki-client